Report - www.netwerkstatistiek.info/ics/a1b2c3/48c66a3572d7d2b482784240e07327ba/login/?

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org (9)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3042	7977	23.36.77.32
www.netwerkstatistiek.info (1)	unknown	2022-12-17T15:44:13Z	2023-02-07T00:32:57Z	409	302	111.90.151.165
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2372	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5854	34.160.144.191
www.bing.com (83)	91	2012-05-21T17:02:58Z	2018-11-01T22:19:15Z	125061	980992	204.79.197.200
www2.bing.com (1)	1811	2018-06-25T01:16:21Z	2023-03-13T07:40:47Z	1415	1137	204.79.197.200
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3246	53106	34.120.237.76
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
th.bing.com (20)	4980	2019-12-09T13:09:09Z	2023-03-13T07:02:49Z	30694	83864	204.79.197.200
assets.msn.com (1)	188	2018-09-21T01:46:35Z	2023-03-13T07:40:47Z	425	5672	23.36.79.18
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	54.189.204.30
login.microsoftonline.com (1)	25	2017-02-19T08:06:40Z	2019-07-18T10:58:27Z	1211	2068	40.126.32.139
login.live.com (1)	79	2012-05-21T09:00:20Z	2023-03-13T05:09:29Z	640	817	40.126.31.64

Scan Date	Severity	Indicator	Alert
2023-01-29	medium	netwerkstatistiek.info	Sinkholed

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

a2104f935c638b4767ca5ae0d738ef23

85c6af15af749be0ceeae6de17c36925b750f166

5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14956
Expires: Mon, 30 Jan 2023 01:59:59 GMT
Date: Sun, 29 Jan 2023 21:50:43 GMT
Connection: keep-alive

URL HTTP/1.1

www.netwerkstatistiek.info/ics/a1b2c3/48c66a3572d7d2b482784240e07327ba/login/?
IP

111.90.151.165:0
ASN

#45839 Shinjiru Technology Sdn Bhd

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /ics/a1b2c3/48c66a3572d7d2b482784240e07327ba/login/? HTTP/1.1
Host: www.netwerkstatistiek.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 302 Found
Date: Sun, 29 Jan 2023 21:50:43 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
location: https://www.bing.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

3eb88dea4fe00db1182370e72683c3ab

ca520abf1e91bfd2aef40c6a1270a911071e8922

d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14665
Expires: Mon, 30 Jan 2023 01:55:08 GMT
Date: Sun, 29 Jan 2023 21:50:43 GMT
Connection: keep-alive

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

302c7548412192add063ad6c8b99cf3b

e5d178931a27db036ce8daae302594d3ff7050b8

fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7459
Expires: Sun, 29 Jan 2023 23:55:02 GMT
Date: Sun, 29 Jan 2023 21:50:43 GMT
Connection: keep-alive

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

dcd75ca6daca51c5e39d431468511793

07f76d3bf23d65c9110d810fa71a994e39e085d3

73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 21:43:09 GMT
content-type: application/json
age: 454
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: qJ/SCDrrZpQ0FRT70QM2OaTCKXiNTCz+sA91rN2Hu1JBWZilK4gv4wDQp/cmtTG6szArxNgBigpY8ZWsy5gPBg==
x-amz-request-id: AFQBVCRWB16QE3X0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 21:50:29 GMT
age: 14
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 21:50:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

very short file (no magic)

Size

5
Hash

e5aa921deb86f8138026bb9c240820fb

966bbc10109a3d130ab5acbc2d202b1b26379afe

18b848a269a2d23ead68930fee1552542e8bd30c65f5d374d3ebea036c903381

HTTP Headers

                                        GET /rp/lmu8EBCaPRMKtay8LSArGyY3mv4.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000
content-length: 5
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 5aqSHeuG+BOAJrucJAgg+w==
last-modified: Wed, 24 Jun 2020 04:27:46 GMT
etag: 0x8D817F6F26EBE3A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 9177ed59-701e-008c-4e94-307525000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 1C1389061CAC4DFAA901A810E5EAA62F Ref B: AM3EDGE0720 Ref C: 2023-01-25T11:03:59Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 0821974AB410449ABD2DE5FBB7357C57 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/th?id=OHR.BlackbirdDay_ROW6506162005_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data

Size

184348
Hash

4777f4f7af0638c04f33a3f886a092d3

050eb85e8ad0b38588178a99ce451e8316b23acd

9d71f2503b0fae12e9c9b8fd92b6d1e424833c23a38fff8d3e5bcec4f2197de4

HTTP Headers

                                        GET /th?id=OHR.BlackbirdDay_ROW6506162005_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 184348
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 54862C50936B41ADAB363BBDD38FBB8D Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/sa/simg/favicon-trans-bg-blue-mg.ico
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data

Size

4286
Hash

30967b1b52cb6df18a8af8fcc04f83c9

aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588

439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e

HTTP Headers

                                        GET /sa/simg/favicon-trans-bg-blue-mg.ico HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=15552000
content-length: 4286
content-type: image/x-icon
last-modified: Mon, 01 Jan 1601 00:00:00 GMT
x-cache: TCP_HIT
server: Kestrel
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F57222229D574F3093A0C61DD078E0D0 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/QNuEl_z_uVdtS87gKkLRwH8hz9w.br.css
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

125051
Hash

1e5b897f57d15801400e9f3f5e44183a

40db8497fcffb9576d4bcee02a42d1c07f21cfdc

c6765ee42725e47da86a284de5c882194a1149bf50ee323e7eec0d2e70b6fdb8

HTTP Headers

                                        GET /rp/QNuEl_z_uVdtS87gKkLRwH8hz9w.br.css HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 125051
content-type: text/css; charset=utf-8
content-encoding: br
content-md5: HluJf1fRWAFADp8/XkQYOg==
last-modified: Fri, 27 Jan 2023 05:48:01 GMT
etag: 0x8DB002A0D0B206F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 14faa127-901e-00ce-5f50-32a6bb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: CF3766F399ED4348971554E124F9DC63 Ref B: AM3EDGE0717 Ref C: 2023-01-27T13:15:47Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 19942419CD224C4597592AE2346A8D71 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (17343), with no line terminators

Size

6683
Hash

204bb375b5117b07884a137329e07bab

e87cb497b3b6e3c43a8abfa85ff1289e2d842308

030c5d06364c1a40ce1d47165d462d3ab67a135fe427978201cf376cf57f7ea1

HTTP Headers

                                        GET /rp/6Hy0l7O248Q6ir-oX_Eoni2EIwg.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 6683
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: IEuzdbUReweIShNzKeB7qw==
last-modified: Wed, 14 Dec 2022 23:50:35 GMT
etag: 0x8DADE2DFE72E2EF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: f57fc79c-901e-0048-7c4c-306a02000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 16E201C03498423B92664BE86FCDF22A Ref B: AM3EDGE1021 Ref C: 2023-01-25T08:24:22Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 4FB6A39EB8664542B35C14C304924506 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/fd/ls/l?IG=B47F11B425B346489CBAB41E41867B5C&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:80,%22CT%22:81,%22IL%22:1}}&P=SERP&DA=DUBE01
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fd/ls/l?IG=B47F11B425B346489CBAB41E41867B5C&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22FC%22:-1,%22BC%22:-1,%22SE%22:-1,%22TC%22:-1,%22H%22:-1,%22BP%22:80,%22CT%22:81,%22IL%22:1}}&P=SERP&DA=DUBE01 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5355D063E8E244929F9BE57C89F1693C Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
content-length: 0
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (51194)

Size

31680
Hash

da6c033369221c0794dd08b8f7f11178

24409b5c59f53b04ddedf77b18d0219b6462ddc7

0800ae567c2db93e1acc3fd6eab2d2aab90a155ec2e7f5bdbb75ce611070c738

HTTP Headers

                                        GET / HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6Mn0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; domain=.bing.com; path=/; HttpOnly
MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; expires=Fri, 23-Feb-2024 21:50:43 GMT; path=/; HttpOnly
SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1268&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866; domain=.bing.com; expires=Fri, 23-Feb-2024 21:50:43 GMT; path=/; secure; SameSite=None
_SS=SID=0131EF85D781627B1AE9FD2DD6746304; domain=.bing.com; path=/; secure; SameSite=None
ULC=; domain=.bing.com; expires=Sat, 28-Jan-2023 21:50:43 GMT; path=/; secure; SameSite=None
_HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; domain=.bing.com; expires=Fri, 23-Feb-2024 21:50:43 GMT; path=/; secure; SameSite=None
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2C408BD5AB8D45E2A089CB9BAD7BB312 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/uXkColSm33PJ9JCaP_qObg6pq8I.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (16998)

Size

7738
Hash

1461aa93362fef1b80553af60c6aa898

b97902a254a6df73c9f4909a3ffa8e6e0ea9abc2

c9ff8ab58772ca5afd27efbd5289c65254a7ad5ba33f57f2e868038bde436bdc

HTTP Headers

                                        GET /rp/uXkColSm33PJ9JCaP_qObg6pq8I.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 7738
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: FGGqkzYv7xuAVTr2DGqomA==
last-modified: Thu, 29 Sep 2022 19:34:29 GMT
etag: 0x8DAA251A0825C06
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1ed08332-a01e-00ea-46ca-32501b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 48682AA9D53C421394A341788D6D92DE Ref B: AM3EDGE0620 Ref C: 2023-01-29T21:31:18Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: D7C5AABD057A47E58C6B6ED6408EFE4A Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/-8B2JlFI9HgFcgp0RGJHcPQD2GM.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (10033), with CRLF line terminators

Size

5105
Hash

5944b72917c24e223384062a021572b1

fbc076265148f47805720a7444624770f403d863

572f9772781fa9000c69fa2c795c97554051fcb30e4f1f60b4b44ab60a12c053

HTTP Headers

                                        GET /rp/-8B2JlFI9HgFcgp0RGJHcPQD2GM.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 5105
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: WUS3KRfCTiIzhAYqAhVysQ==
last-modified: Thu, 15 Sep 2022 21:37:18 GMT
etag: 0x8DA976276EEA14F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1e0b0797-a01e-0053-48b7-325401000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: FA1662220C9548D19AD29FD91300C3F6 Ref B: AM3EDGE0722 Ref C: 2023-01-29T21:31:04Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 381C389C4AC0434085E3C4AAFA3C9305 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/T0lAQLm87gv5AUytm5v9--Y-Yj0.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (443), with no line terminators

Size

201
Hash

046f9208750472766514a11e903356da

4f494040b9bcee0bf9014cad9b9bfdfbe63e623d

17ecbfee473322f41352e17aee210966b694d0ef40c8583ef2a4c57e9a92e974

HTTP Headers

                                        GET /rp/T0lAQLm87gv5AUytm5v9--Y-Yj0.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 201
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: BG+SCHUEcnZlFKEekDNW2g==
last-modified: Wed, 17 Aug 2022 06:00:53 GMT
etag: 0x8DA8015D8256542
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: aec1729a-d01e-00cf-0d6d-30f967000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: F41D27BBD9444A6BA0D3DF0F512D23D8 Ref B: AM3EDGE0610 Ref C: 2023-01-25T09:24:18Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 3C6F9407E09D4D3C831015B13C066706 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/KbdNoKoTp6pcIwce8Ydw3sjeIHc.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with CRLF line terminators

Size

126240
Hash

c869129706723fed30a21d508a64e9b4

29b74da0aa13a7aa5c23071ef18770dec8de2077

1016c57fe6168130abaf9cf864dccaab0b7befe05d26647a6d200a177503c99e

HTTP Headers

                                        GET /rp/KbdNoKoTp6pcIwce8Ydw3sjeIHc.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 126240
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: yGkSlwZyP+0woh1QimTptA==
last-modified: Thu, 15 Sep 2022 21:37:36 GMT
etag: 0x8DA976281A77CDD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: f127775a-701e-009b-5c55-30b630000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: E4C073EB331A43F1AD5B909FCD404963 Ref B: AM3EDGE0611 Ref C: 2023-01-25T18:06:37Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 94168001572A463194F202C47CC5DB0E Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/hSGwh2JO2tj-l608vqtbJ2446IY.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (2965), with no line terminators

Size

1378
Hash

bdd4048816553ea40acb42eecbe9ae34

8521b087624edad8fe97ad3cbeab5b276e38e886

8d5d0a44e4879c262a56f74b9e95405556dbad6fb1e44243487645afc0c171d3

HTTP Headers

                                        GET /rp/hSGwh2JO2tj-l608vqtbJ2446IY.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 1378
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: vdQEiBZVPqQKy0Luy+muNA==
last-modified: Wed, 17 Aug 2022 06:29:55 GMT
etag: 0x8DA8019E69C3760
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 8ed1aab9-b01e-0070-24e4-32cec2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 1470C0945E3B462B94D81A6A3A2E3FDA Ref B: AM3EDGE0618 Ref C: 2023-01-29T11:57:58Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 8AB026B489A14B98880E8C8EF8EF7108 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/O7fNg96R1_CsQZshpnEC3v_JCPI.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (1228), with no line terminators

Size

610
Hash

f61da7b710063e1070d6d0a07754192c

3bb7cd83de91d7f0ac419b21a67102deffc908f2

891410ffff9045b2cd90debcc589f8ee983b7411b1f3574e9495307bdeab0f5b

HTTP Headers

                                        GET /rp/O7fNg96R1_CsQZshpnEC3v_JCPI.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 610
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: 9h2ntxAGPhBw1tCgd1QZLA==
last-modified: Wed, 17 Aug 2022 05:51:20 GMT
etag: 0x8DA801482AA2E70
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1f0968fc-c01e-0008-1150-306d3a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 58300C9B2B9C4BD5B8B4D9B573773DC1 Ref B: AM3EDGE0917 Ref C: 2023-01-25T12:19:54Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: AC4B1DA800674523B7C709872DB8355D Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/nsroEpGNC5Bi2JavQ0PnhO3f744.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (5793), with no line terminators

Size

2520
Hash

bfc8c6ff053ea4b31c3a687bb79279ae

9ecae812918d0b9062d896af4343e784eddfef8e

5882bad07a9180ead84df92105c64a3a49dda3c0e5778be032563c5c2c8caf05

HTTP Headers

                                        GET /rp/nsroEpGNC5Bi2JavQ0PnhO3f744.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 2520
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: v8jG/wU+pLMcOmh7t5J5rg==
last-modified: Fri, 20 Jan 2023 19:51:30 GMT
etag: 0x8DAFB1FB9EB432E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1e1b6ee9-501e-001a-715b-3016ea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 3995700E8EA942318D53519B951C844D Ref B: AM3EDGE0614 Ref C: 2023-01-25T11:17:16Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 8E81DC5C23494329B1A7D2CEF77FD371 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/9NY1h-PkzBwPJlU1vCGX-aJdD0o.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

123219
Hash

731b36f1f197bddbf96e0ceaa45b421f

f4d63587e3e4cc1c0f265535bc2197f9a25d0f4a

cfdfc7647c42ec1740e75feb5833682955224e0eea7723ca5a1ce2a8fa0e78c3

HTTP Headers

                                        GET /rp/9NY1h-PkzBwPJlU1vCGX-aJdD0o.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 123219
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: cxs28fGXvdv5bgzqpFtCHw==
last-modified: Fri, 27 Jan 2023 22:44:30 GMT
etag: 0x8DB00B80D8E4A86
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 0c9014b4-301e-00f8-3df6-322bcb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 489136DBF1874060865BF513BBD6695D Ref B: AM3EDGE0717 Ref C: 2023-01-28T10:29:12Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 7E375FFB2ED44882A9479788B838794C Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/xrUJJ8sN8ucbiFbMJle3n0IfRwU.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with no line terminators

Size

151
Hash

26259c75a0d0d4271c76e73c2f87917a

c6b50927cb0df2e71b8856cc2657b79f421f4705

900c34cd81e6aecd131a3eb8031a9513c5069a94deba1cfcce86cb0aada241be

HTTP Headers

                                        GET /rp/xrUJJ8sN8ucbiFbMJle3n0IfRwU.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 151
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: JiWcdaDQ1Cccduc8L4eReg==
last-modified: Wed, 17 Aug 2022 07:04:52 GMT
etag: 0x8DA801EC85E8197
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: d5480983-f01e-0095-285b-309f80000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 0EF8BE1D1ADB4FE3B2A752D51CA8144A Ref B: AM3EDGE1015 Ref C: 2023-01-26T00:18:37Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 296B478390BE48A2905F361C137A4786 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/LXu4eYVt3NhFk3Ud9ZbhZ_PYFaA.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (426), with no line terminators

Size

238
Hash

4137a3f03dcd7fd4b7752f70c8074495

2d7bb879856ddcd84593751df596e167f3d815a0

6558c0e3b023f49f00632f55ed2aa2bc7725fc331ade0785f959514f363441f1

HTTP Headers

                                        GET /rp/LXu4eYVt3NhFk3Ud9ZbhZ_PYFaA.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 238
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: QTej8D3Nf9S3dS9wyAdElQ==
last-modified: Wed, 17 Aug 2022 05:46:46 GMT
etag: 0x8DA8013DF535957
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 441990e6-501e-00a3-2ad9-3212f0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 43E5EF2A448046C2877006E62050EC5E Ref B: AM3EDGE0612 Ref C: 2023-01-29T20:02:06Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 3EFD9E7B6F0B424AA6D150F4E43ADFD9 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/JXkjDPywJD9oeuWPLy7bD8Jc6mw.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (423), with no line terminators

Size

278
Hash

0ec6fd6c42c79b50c72ff3c4121b11de

2579230cfcb0243f687ae58f2f2edb0fc25cea6c

b83e4279b26315a76a3d2066e9748825f764a83c2c0351c74387dab5c70876ed

HTTP Headers

                                        GET /rp/JXkjDPywJD9oeuWPLy7bD8Jc6mw.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 278
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: Dsb9bELHm1DHL/PEEhsR3g==
last-modified: Wed, 17 Aug 2022 05:42:04 GMT
etag: 0x8DA801337338927
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: a0dfbae9-801e-0044-0d52-30fd0a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 1D83F02F63F04AC495EB736E4DF510AC Ref B: AM3EDGE0718 Ref C: 2023-01-25T11:03:59Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 67106275ADF841EDBF261EFBC10FA69C Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/ilbkF5vv0sk3tJ8LDY0Nm39p12g.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (425), with no line terminators

Size

258
Hash

98e5973bc0f7e89beda92ff046e64849

8a56e4179befd2c937b49f0b0d8d0d9b7f69d768

e888ebc827d9222c6e48eb421f0835d49fce8cbffec34da70c30df52741f5f00

HTTP Headers

                                        GET /rp/ilbkF5vv0sk3tJ8LDY0Nm39p12g.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 258
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: mOWXO8D36JvtqS/wRuZISQ==
last-modified: Wed, 17 Aug 2022 06:33:11 GMT
etag: 0x8DA801A5B2CE61F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 1e1e76d6-501e-001a-1f65-3016ea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 4D3B202CBB84474DB53C185779658EC3 Ref B: AM3EDGE1022 Ref C: 2023-01-25T10:58:19Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: F275E7B972D34ACF816503C3B840C214 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/Gyuq2bqitqDJM0BeAkbKXGlQXNw.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (1274), with no line terminators

Size

714
Hash

c10999430bb33502865af934d77220a4

1b2baad9baa2b6a0c933405e0246ca5c69505cdc

914aa4d773471c0c464051575f9a74a44cf5693d62411e2bf95e4f501edfecac

HTTP Headers

                                        GET /rp/Gyuq2bqitqDJM0BeAkbKXGlQXNw.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 714
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: wQmZQwuzNQKGWvk013IgpA==
last-modified: Wed, 17 Aug 2022 05:37:09 GMT
etag: 0x8DA8012871F1AB6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: b568eb53-801e-00c2-7b5e-3031b3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 2279874271344CFBB4A9D6DFFEFAA45E Ref B: AM3EDGE0907 Ref C: 2023-01-25T09:18:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: E89F141A1CDF4294AA336D74D99A4F91 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/MjkKTrIX9w2UKVd1W1WV1Gj2zWM.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (938), with no line terminators

Size

504
Hash

605ac0925a8dc06b8bf87e50e72c599f

32390a4eb217f70d942957755b5595d468f6cd63

31a54e70b32c7ff53fab4d6c5f06cc830aba452fcd3e114c938ce33751058c72

HTTP Headers

                                        GET /rp/MjkKTrIX9w2UKVd1W1WV1Gj2zWM.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 504
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: YFrAklqNwGuL+H5Q5yxZnw==
last-modified: Wed, 17 Aug 2022 05:49:34 GMT
etag: 0x8DA801443417B4B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 10d08d8a-501e-0068-4052-3011a5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: BA6FB37A31494E89B64FF827069BBDB3 Ref B: AM3EDGE1022 Ref C: 2023-01-26T00:18:19Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: E86C96A76F994B61B81C1320ED59E5F8 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (576), with no line terminators

Size

368
Hash

c65d9214b64240472c6543405127cc98

57f7c143f895980804fd36bf4fee81357734658e

2d6cd78310f404d4d1d024792cbba3eedec56bdaee61f4669ce7620687572147

HTTP Headers

                                        GET /rp/V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 368
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: xl2SFLZCQEcsZUNAUSfMmA==
last-modified: Wed, 17 Aug 2022 06:06:36 GMT
etag: 0x8DA8016A4AEB24C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 675a05a8-c01e-0008-22b4-326d3a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 7F73E477F48E4A078514741CAA4B6FEC Ref B: AM3EDGE0720 Ref C: 2023-01-29T20:02:07Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C3387395BD76433ABE6DC494ECDE5DFC Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/mEnA5fBf4mUGnGBL55wbFSniDys.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (21616)

Size

8864
Hash

84eeaa49c503cd4eca340a927272c268

9849c0e5f05fe265069c604be79c1b1529e20f2b

411666a81d0e595fec8579cc62028548ab247df628d775bd62acd7b6085c3f38

HTTP Headers

                                        GET /rp/mEnA5fBf4mUGnGBL55wbFSniDys.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 8864
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: hO6qScUDzU7KNAqScnLCaA==
last-modified: Thu, 15 Sep 2022 21:36:08 GMT
etag: 0x8DA97624D57C278
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 23fed95e-701e-0047-5694-307670000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 64CBC5A3086243AF9B69B7C834FCB6E5 Ref B: AM3EDGE1019 Ref C: 2023-01-25T08:35:21Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: D012E8ED93314BDD923210C00A0CEC39 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/8CgcSSLayxEVUBf0swP_bQGMId8.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with no line terminators

Size

156
Hash

d00a4a9b19d6765809febdd5bf16e615

f0281c4922dacb11155017f4b303ff6d018c21df

c23431129f545615a210e57cd5f9c6964f797c068b5e30ff3c7c105e2417438e

HTTP Headers

                                        GET /rp/8CgcSSLayxEVUBf0swP_bQGMId8.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 156
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: 0ApKmxnWdlgJ/r3VvxbmFQ==
last-modified: Wed, 17 Aug 2022 05:18:49 GMT
etag: 0x8DA800FF7F6EFE0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 69c5263f-401e-00dd-10db-3282b7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 252A688AABE84CAC8A44F4B2EAC9C562 Ref B: AM3EDGE1014 Ref C: 2023-01-29T09:56:46Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: C24C97E8F3FC44BDBEC2D657B0D19ADC Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/n21aGRCN5EKHB3qObygw029dyNU.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

Unicode text, UTF-8 text, with very long lines (1587), with no line terminators

Size

806
Hash

851ad37bdc453dc11018b18f815be387

9f6d5a19108de44287077a8e6f2830d36f5dc8d5

3e4339186f9b62a5cf8c119c419025d8634d93724708481d03d7a4b1f40980b3

HTTP Headers

                                        GET /rp/n21aGRCN5EKHB3qObygw029dyNU.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000
content-length: 806
content-type: text/javascript; charset=utf-8
content-encoding: br
content-md5: hRrTe9xFPcEQGLGPgVvjhw==
last-modified: Wed, 30 Jun 2021 06:36:05 GMT
etag: 0x8D93B91568DF318
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 6296dce6-d01e-0082-3255-30368b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 99B9496D7AAB4CF089BE178487327919 Ref B: AM3EDGE0710 Ref C: 2023-01-27T10:13:20Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 5251CB51280449AAA2B70569BAA5BF48 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/C7TuoP5bfHv-CZlMHZy7yfvI4Fk.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (328), with no line terminators

Size

203
Hash

408709922b53a36770fd4769bb69574a

0bb4eea0fe5b7c7bfe09994c1d9cbbc9fbc8e059

625dbbdd325592d60fde2aaaeff66aec2bf3baa8cfaa68b2128d7d72b48c93d8

HTTP Headers

                                        GET /rp/C7TuoP5bfHv-CZlMHZy7yfvI4Fk.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform, immutable
content-length: 203
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: QIcJkitTo2dw/Udpu2lXSg==
last-modified: Wed, 17 Aug 2022 05:25:38 GMT
etag: 0x8DA8010EBB46742
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 5e78d096-901e-00de-0f53-3063d3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: 00BFACD94938469985D83160CD3FE125 Ref B: AM3EDGE0610 Ref C: 2023-01-25T12:08:22Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: F1D4BDE4F1C64AC281CCF1048C5DA2D8 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

URL HTTP/2

www.bing.com/rp/XJ8OmILbNhm0zU9tdkuGYeXVPRQ.br.js
IP

204.79.197.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

ASCII text, with very long lines (391), with no line terminators

Size

269
Hash

5edf23a0d0a8033bc3899a14fc856376

5c9f0e9882db3619b4cd4f6d764b8661e5d53d14

f628b6d239249f6e381bde469fba2f81987f2ddcafe94b0e2548abda749a7fed

HTTP Headers

                                        GET /rp/XJ8OmILbNhm0zU9tdkuGYeXVPRQ.br.js HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Cookie: SUID=M; MUID=1D7FC983C43B60751F28DB2BC5CE61B3; MUIDB=1D7FC983C43B60751F28DB2BC5CE61B3; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=D813F22221594CEDA3FB1DEE955F5BC8&dmnchg=1; SRCHUSR=DOB=20230129&T=1675025899000; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyMy0wMS0yOVQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIkRmdCI6bnVsbCwiTXZzIjowLCJGbHQiOjAsIkltcCI6MX0=; _UR=QS=0&TQS=0; _RwBf=ilt=3&ihpd=3&ispd=0&rc=0&rb=0&gb=0&rg=200&pc=0&mtu=0&rbb=0&g=0&cid=&clo=0&v=3&l=2023-01-29T08:00:00.0000000Z&lft=0001-01-01T00:00:00.0000000&aof=0&o=2&p=&c=&t=0&s=0001-01-01T00:00:00.0000000+00:00&ts=2023-01-29T21:47:28.9904635+00:00&rwred=0&wls=&lka=0&lkt=0&TH=; SRCHHPGUSR=BRW=M&BRH=M&CW=1280&CH=939&SCW=1280&SCH=939&SRCHLANG=en&WTS=63810625647&HV=1675028866&DPR=1.0&UTC=0&DM=0; _EDGE_S=SID=0131EF85D781627B1AE9FD2DD6746304; _SS=SID=0131EF85D781627B1AE9FD2DD6746304
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=432000, no-transform
content-length: 269
content-type: application/x-javascript; charset=utf-8
content-encoding: br
content-md5: Xt8joNCoAzvDiZoU/IVjdg==
last-modified: Wed, 17 Aug 2022 06:10:20 GMT
etag: 0x8DA80172A213C93
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_HIT
x-ms-request-id: 7d6a7934-601e-003e-4f4e-30e04a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-azure-ref-originshield: Ref A: EB5408D6A51E4790A34A1174B951E658 Ref B: AM3EDGE0915 Ref C: 2023-01-25T09:18:56Z
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
x-msedge-ref: Ref A: 2497DE6C0C7A4E648FD4631F453708E6 Ref B: OSL30EDGE0106 Ref C: 2023-01-29T21:50:43Z
date: Sun, 29 Jan 2023 21:50:43 GMT
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (52)

#1 JS:Script (size: 443)

#2 JS:Script (size: 5793)

#3 JS:Script (size: 90)

#4 JS:Script (size: 315)

#5 JS:Script (size: 1274)

#6 JS:Script (size: 306)

#7 JS:Script (size: 920)

#8 JS:Script (size: 327395)

#9 JS:Script (size: 1051)

#10 JS:Script (size: 28947)

#11 JS:Script (size: 13612)

#12 JS:Script (size: 938)

#13 JS:Script (size: 1589)

#14 JS:Script (size: 13338)

#15 JS:Script (size: 2015)

#16 JS:Script (size: 19932)

#17 JS:Script (size: 42967)

#18 JS:Script (size: 21647)

#19 JS:Script (size: 110)

#20 JS:Script (size: 423)

#21 JS:Script (size: 1228)

#22 JS:Script (size: 2678)

#23 JS:Script (size: 0)

#24 JS:Script (size: 426)

#25 JS:Script (size: 89)

#26 JS:Script (size: 2524)

#27 JS:Script (size: 111889)

#28 JS:Script (size: 64)

#29 JS:Script (size: 252)

#30 JS:Script (size: 457)

#31 JS:Script (size: 3278)

#32 JS:Script (size: 226)

#33 JS:Script (size: 576)

#34 JS:Script (size: 212)

#35 JS:Script (size: 358)

#36 JS:Script (size: 17026)

#37 JS:Script (size: 20)

#38 JS:Script (size: 257)

#39 JS:Script (size: 425)

#40 JS:Script (size: 328)

#41 JS:Script (size: 520)

#42 JS:Script (size: 1284)

#43 JS:Script (size: 1931)

#44 JS:Script (size: 27)

#45 JS:Script (size: 5666)

#46 JS:Script (size: 12933)

#47 JS:Script (size: 2965)

#48 JS:Script (size: 1234)

#49 JS:Script (size: 258)

#50 JS:Script (size: 391)

#51 JS:Script (size: 17343)

#1 JS:Eval (size: 12)

HTTP Transactions (128)

URL HTTP/1.1

IP

ASN